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AMENDMENT TO THE CLAIMS 

1 . (Currently Amended) A method for effecting a secure electronic transaction on a 
terminal using a portable data carrier arranged to perform different quality user authentication 
methods, wherein the portable data carrier performs a user authentication using one of said 
different user authentication methods, the portable data carrier confirms the proof of 
authentication to the terminal, and the portable data carrier then performs a security- 
establishing operation within the electronic transaction, comprising the steps of creating 
authentication quality information by the portable data carrier about said user authentication 
method used and attaching said authentication quality information to the result of the 
security-establishing operation, wherein the difference in quality of said user authentication 
methods varies between an inherently relatively lower quality and an inherently relatively 
higher quality from a security perspective. 

2. (Previously Presented) The method according to claim 1, wherein the security- 
establishing operation performed by the portable data carrier comprises creating a digital 
signature. 

3. (Previously Presented) The method according to claim 1, wherein the 
authentication of the user is performed by presentation of a biometric feature. 

4. (Previously Presented) The method according to claim 3, wherein the 
authentication of the user is performed by presentation of a physiological or behavior-based 
feature characteristic of a user. 

5. (Previously Presented) The method according to claim 1, wherein the 
authentication of the user is performed by proof of knowledge of a secret. 

6. (Previously Presented) The method according to claim 1, wherein at least two 
different authentication methods of different quality are offered for authentication of the user. 

7. (Previously Presented) The method according to claim 6, wherein the particular 
authentication methods not used are disabled. 
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8. (Previously Presented) The method according to claim 6, wherein no quality 
information is produced for an authentication method. 

9. (Previously Presented) The method according to claim 1, wherein a user is asked to 
select an authentication method. 

10. (Currently Amended) A portable data carrier for performing a security- 
establishing operation within a secure electronic transaction and arranged to perform different 
quality user authentication methods, wherein the difference in quality of said user 
authentication methods varies between an inherently relatively lower quality and an 
inherently relatively higher quality from a security perspective, comprising: the portable data 
carrier is arranged to perform a user authentication using one of said implemented user 
authentication methods and the portable data carrier is arranged to confirm the authentication 
to a terminal, and wherein the data carrier is arranged to create quality information about said 
user authentication method used and to attach such quality information to the result of the 
security establishing operation. 

1 1 . (Previously Presented) The data carrier according to claim 10, wherein the 
portable data carrier is set up to create a digital signature. 

12. (Previously Presented) The data carrier according to claim 10, wherein the data 
carrier supports at least two qualitatively different authentication methods. 

13. (Previously Presented) A terminal for use in connection with the portable data 
carrier according to claim 10, said terminal including a device arranged to cause a user to 
select one of at least two possible different quality authentication methods. 

14. (Previously Presented) A system for effecting a secure electronic transaction 
within which the quality of authentication of a user of the system is ascertained, comprising 
the portable data carrier according to claim 10 and the terminal according to claim 13. 
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